work_log approval button, admin menu control, basic access control